You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by dr...@apache.org on 2015/03/19 01:04:52 UTC
[1/2] directory-kerby git commit: Updated the home page
Repository: directory-kerby
Updated Branches:
refs/heads/master 4bb6a7c80 -> 38cbe7896
Updated the home page
Project: http://git-wip-us.apache.org/repos/asf/directory-kerby/repo
Commit: http://git-wip-us.apache.org/repos/asf/directory-kerby/commit/bb6017e3
Tree: http://git-wip-us.apache.org/repos/asf/directory-kerby/tree/bb6017e3
Diff: http://git-wip-us.apache.org/repos/asf/directory-kerby/diff/bb6017e3
Branch: refs/heads/master
Commit: bb6017e3ad47dda4227c42bf968f2ae918b1919e
Parents: 4bb6a7c
Author: Drankye <dr...@gmail.com>
Authored: Thu Mar 19 07:58:13 2015 +0800
Committer: Drankye <dr...@gmail.com>
Committed: Thu Mar 19 07:58:13 2015 +0800
----------------------------------------------------------------------
README.md | 31 +++++++++++--------------------
1 file changed, 11 insertions(+), 20 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/bb6017e3/README.md
----------------------------------------------------------------------
diff --git a/README.md b/README.md
index da488df..b263342 100644
--- a/README.md
+++ b/README.md
@@ -1,33 +1,21 @@
Apache Kerby
============
-Apache Kerby is a Java Kerberos binding. It provides a rich, intuitive and interoperable implementation, library and various facilities that integrate Kerberos, PKI and token (OAuth) as desired in modern environments such as mobile, cloud and Hadoop.
+Apache Kerby is a Java Kerberos binding. It provides a rich, intuitive and interoperable implementation, library, standalone KDC and various facilities that bases on Kerberos, and integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile.
### The Initiatives/Goals
-* Aims as a Java Kerberos binding, with rich and integrated facilities that integrate Kerberos, PKI and token (OAuth) for both client and server sides.
+* Aims as a Java Kerberos binding, with rich and integrated facilities that integrate Kerberos, PKI and token (OAuth2) for both client and server sides.
+ Provides client APIs at the Kerberos protocol level to interact with a KDC server through AS and TGS exchanges.
++ Provides a standalone KDC server that supports various identity back ends including memory based, Json file based, LDAP backed and even Zookeeper backed.
+ Provides an embedded KDC server that applications can easily integrate into products, unit tests or integration tests.
+ Supports FAST/Preauthentication framework to allow popular and useful authentication mechanisms.
+ Supports PKINIT mechanism to allow clients to request tickets using x509 certificate credentials.
+ Supports Token Preauth mechanism to allow clients to request tickets using JWT tokens.
++ Supports OTP mechanism to allow clients to request tickets using One Time Password.
+ Provides support for JAAS, GSSAPI and SASL frameworks that applications can leverage.
-+ Minimal dependencies, the core part is ensured to depend only on JRE, for easy use and maintenance.
++ Minimal dependencies, the core part is ensured to depend only on JRE and SLF4J, for easy use and maintenance.
-### Status
-As follows, with the core and critical parts done, important features are still ongoing. We're expecting a major release this year.
-<pre>
-ASN-1 (done)
-Kerberos core and codec (done)
-Kerberos Crypto (done)
-Embedded KDC (the core done)
-KrbClient (partial APIs done and available)
-Preauth/FAST framework (partially done)
-Token Preauth (ongoing)
-PKINIT (ongoing)
-Keytab util (credential cache and keytab support, done)
-</pre>
-
-### Desired KrbClient APIs (partially done)
+### KrbClient APIs (Working In Progress)
* Initiate a KrbClient
<pre>
KrbClient krbClient = new KrbClient(kdcHost, kdcPort);
@@ -36,6 +24,10 @@ KrbClient krbClient = new KrbClient(kdcHost, kdcPort);
<pre>
krbClient.requestTgtTicket(principal, password);
</pre>
+* Request a TGT with a keytab file
+<pre>
+krbClient.requestTgtTicket(principal, keytab);
+</pre>
* Request a TGT with user x509 certificate credential
<pre>
krbClient.requestTgtTicket(principal, certificate);
@@ -81,13 +73,12 @@ Independent of Kerberos code in JRE, but rely on JCE
| camellia | The Camellia family: camellia256-cts-cmac and camellia128-cts-cmac |
### Dependency
-The core part is ensured to only depend on the JRE. Every external dependency is taken carefully and maintained separately.
+The core part is ensured to only depend on the JRE and SLF4J. Every external dependency is taken carefully and maintained separately.
##### Contrib Projects
- kerby-asn1. A model driven ASN-1 encoding and decoding framework
- kerby-event. A pure event driven application framework aiming to construct applications of asynchronous and concurrent handlers. It includes UDP and TCP transports based on pure Java NIO and concurrency pattern.
- kerby-config. A unified configuration API that aims to support various configuration file formats, like XML, JNI, CSV and Java Properties file.
-- kerby-token. Implements a JWT token API for Kerberos that's defined in TokenPreauth drafts.
### License
Apache License V2.0
[2/2] directory-kerby git commit: Updated the home page
Posted by dr...@apache.org.
Updated the home page
Project: http://git-wip-us.apache.org/repos/asf/directory-kerby/repo
Commit: http://git-wip-us.apache.org/repos/asf/directory-kerby/commit/38cbe789
Tree: http://git-wip-us.apache.org/repos/asf/directory-kerby/tree/38cbe789
Diff: http://git-wip-us.apache.org/repos/asf/directory-kerby/diff/38cbe789
Branch: refs/heads/master
Commit: 38cbe789699de685bdc4a904dcba553c5fa67b4f
Parents: bb6017e
Author: Drankye <dr...@gmail.com>
Authored: Thu Mar 19 08:03:14 2015 +0800
Committer: Drankye <dr...@gmail.com>
Committed: Thu Mar 19 08:03:14 2015 +0800
----------------------------------------------------------------------
README.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/directory-kerby/blob/38cbe789/README.md
----------------------------------------------------------------------
diff --git a/README.md b/README.md
index b263342..6be4f59 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
Apache Kerby
============
-Apache Kerby is a Java Kerberos binding. It provides a rich, intuitive and interoperable implementation, library, standalone KDC and various facilities that bases on Kerberos, and integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile.
+Apache Kerby is a Java Kerberos binding. It provides a rich, intuitive and interoperable implementation, library, KDC and various facilities that integrates PKI, OTP and token (OAuth2) as desired in modern environments such as cloud, Hadoop and mobile.
### The Initiatives/Goals
* Aims as a Java Kerberos binding, with rich and integrated facilities that integrate Kerberos, PKI and token (OAuth2) for both client and server sides.
@@ -78,7 +78,7 @@ The core part is ensured to only depend on the JRE and SLF4J. Every external dep
##### Contrib Projects
- kerby-asn1. A model driven ASN-1 encoding and decoding framework
- kerby-event. A pure event driven application framework aiming to construct applications of asynchronous and concurrent handlers. It includes UDP and TCP transports based on pure Java NIO and concurrency pattern.
-- kerby-config. A unified configuration API that aims to support various configuration file formats, like XML, JNI, CSV and Java Properties file.
+- kerby-config. A unified configuration API that aims to support various configuration file formats, like XML, INI, even Java Map and Properties.
### License
Apache License V2.0